VULNERABILITY INTELLIGENCE

漏洞情报库

组合风险、利用情报和受影响对象，快速定位需要优先处置的漏洞。

验证信息保护仅展示 PoC 是否收录不公开内容、路径和下载地址

漏洞与影响对象	漏洞类型	风险等级	CVSS	EPSS	PoC 状态	披露时间
CVE-2023-6568 Mlflow - Cross-Site Scripting mlflow	跨站脚本攻击	中危	6.1	1.7%	PoC	2023/12/19
CVE-2023-48795 OpenSSH Terrapin Attack - Detection OpenSSH	信息泄露	中危	5.9	93.5%	PoC	2023/12/18
CVE-2023-6065 Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure quttera_web_malware_scanner	信息泄露	中危	5.3	18.6%	PoC	2023/12/18
CVE-2023-6909RCE Mlflow <2.9.2 - Path Traversal mlflow	路径穿越	高危	7.5	89.7%	PoC	2023/12/18
CVE-2023-6893 CVE-2023-6893 intercom_broadcast_system	文件包含	高危	4.3	70.2%	PoC	2023/12/17
CVE-2023-6895RCE Hikvision IP ping.php - Command Execution intercom_broadcast_system	远程代码执行	严重	9.8	89.1%	PoC	2023/12/16
CVE-2023-50917RCE MajorDoMo thumb.php - OS Command Injection majordomo	远程代码执行	严重	9.8	38.0%	PoC	2023/12/16
CVE-2023-29234RCE CVE-2023-29234 ApacheDubbo	远程代码执行	严重	9.8	7.4%	PoC	2023/12/15
CVE-2023-50720 XWiki < 4.10.15 - Email Disclosure XWiki	信息泄露	中危	5.3	59.1%	PoC	2023/12/15
CVE-2023-50719 XWiki < 4.10.15 - Sensitive Information Disclosure XWiki	信息泄露	高危	7.5	83.5%	PoC	2023/12/15
CNVD-2023-03903RCE EduSoho < v22.4.7 - Local File Inclusion EduSoho	文件包含	高危	—	—	PoC	2023/12/15
CVE-2023-6831 mlflow - Path Traversal mlflow	路径穿越	高危	8.1	3.3%	PoC	2023/12/15
CVE-2023-6553 Worpress Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution backup_backup	远程代码执行	严重	9.8	97.8%	PoC	2023/12/15
CVE-2023-48085RCE CVE-2023-48085 Nagios-XI	远程代码执行	严重	9.8	75.8%	PoC	2023/12/14
CVE-2023-48084 Nagios XI < 5.11.3 - SQL Injection Nagios-XI	SQL注入	严重	9.8	33.7%	PoC	2023/12/14
CVE-2022-45365 Stock Ticker <= 3.23.2 - Cross-Site-Scripting stock_ticker	跨站脚本攻击	中危	6.1	48.9%	PoC	2023/12/14
CVE-2023-6786 Payment Gateway for Telcell < 2.0.4 - Open Redirect payment-gateway-for-telcell	不安全的重定向	中危	—	0.51%	PoC	2023/12/13
CVE-2023-6379RCE OpenCMS 14 & 15 - Cross Site Scripting opencms	跨站脚本攻击	中危	6.1	1.8%	PoC	2023/12/13
CVE-2023-6380 OpenCms 14 & 15 - Open Redirect opencms	不安全的重定向	中危	6.1	1.6%	PoC	2023/12/13
RCE Celery Flower - Unauthenticated Access flower	未授权访问	高危	—	—	PoC	2023/12/13